Adhost Blog
24/7/365 Support
1-888-323-4678
support@adhost.com
PCI Compliance and Ecommerce Sites
Posted in Security, Web developmentOnline and other merchants are now required to comply with Visa / Mastercard Payment Card Industry Data Security Standards [PCI-DSS]. You can learn more about that online at the Visa and Mastercard sites or a host of other sites as well. Just type ‘PCI DSS compliance’ into Google.
Wikipedia has a useful overview: en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard
and we have a brief description on our site as well: PCI Compliancy.
For online businesses that need to 1) adjust final order amounts after the original transaction or 2) perform subsequent charges or credits against the original card, storage of the card locally is no longer a realistic option without substantial outlays for hardware, software and programming [servers, firewalls, anti-virus programs and encryption coding].
This can be mitigated by employing a Credit Card Gateway that supports what is frequently called a ‘Tokenization’ solution that stores the credit card for you on their PCI compliant servers and allows you to perform later transactions against the stored card by way of a ‘token’ provided at the time of the original transaction.
We have researched several options for our ecommerce clients. Contact your sales representative for more information at 206-404-9000 or 1-888-234-6781.
permalink | digg this | technorati